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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address ~ 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )K Responsive to communication(s) filed on 30 March 2003 . 
2a)[3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11 , 453 O.G. 213. 
Disposition of Claims 

4) [3 Claim(s) 6-9,11-15 and 19-36 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) £3 Claim(s) 6-9,11-15 and 19-36 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) Q The drawing(s) filed on is/are: a)D accepted or b)[2 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

1 1) D The proposed drawing correction filed on is: a)Q approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) 0 The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§ 119 and 120 

1 3) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 



3.Q Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 1 9(e) (to a provisional application). 

a) D The translation of the foreign language provisional application has been received. 

1 5) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 1 20 and/or 121. 
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2) O Notice of Draftsperson's Patent Drawing Review (PTO-948) 
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5) CD Notice of Informal Patent Application (PTO-152) 
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DETAILED ACTION 



Response to Amendment 

1 . This Office Action is responsive to the amendment filed on 3/30/03, in which claims 
6,8,9,13,22,23 were amended. 

Response to Arguments 

2. Applicant's arguments filed 3/30/03 have been fully considered but they are not 
persuasive. 

Applicant argues, "Talati and Linehan are not properly combinable, since, if combined 
their intended function is destroyed". Also, Applicant explains that Talati et al. does not utilizes 
digital signature in their transaction whereas, Linehan uses digital signatures to perform 
authentication. 

The examiner disagrees; Talati et al. disclose utilizing digital signatures for transaction 
validation/authentication (see col. 5, lines 33-36). Therefore, combining Talati et al. with 
Linehan will not damaged their "intended function". 

3. Applicant's arguments with respect to claims 13 and 22 have been considered but are 
moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC§101 



4. Claim 13 is rejected under 35 U.S.C. 101 because the claimed invention is directed to 
non-statutory subject matter. That is, Claim 13 is not explicitly in the technological arts. It 
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merely implies it by reciting e-commerce merchant but this does not require any hardware in the 
method. 

Although Applicant modified claim 13 to include a "node associated with the customer", 
Applicant is required to specific the nod type, e.g. "a computer node" or " a network node", 
doing so will overcome the 35 USC § 101 rejection. 

Claim Rejections -35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the pnor art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 6, 9, 1 1- 13 are rejected under 35 U.S.C. 103(a) as being unpatentable over U.S. 
Patent No. 5903878 to Talati et al. in view of U.S. Patent No. 6205435 to Biffar. 

Referring to claim 13, Talati et al. disclose establishing a signature phrase for being used 
in a plurality of transactions, linking the signature phrase to the account number for use in the 
transactions; upon indication from a node associated with the e-commerce merchant that a 
transaction has initiated, providing an authorization form to a node associated with the customer, 
the authorization form being from a node associated with an entity separate from the e-commerce 
merchant, receiving the signature phrase from the node associated with the customer through a 
customer response to the authorization form, and extending rights to the account, normally only 
associated with the account code, to the signature phrase such that the customer can authorize the 
transaction made on the account using the signature phrase (see col. 10, lines 13-15, 41-67; col. 
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11, 1-20). Note. The CA is the credit authority (See col. 5, line 56). The CA generates an email 
including confirmation information. The confirmation message includes "randomly generated 
questions on which only the client has knowledge, such as birth date, mother's maiden name, 
social security number, etc."; the examiner interprets this confirmation e-mail message as an 
authorization form. As per receiving the signature phrase, after receiving the authorization form, 
the user of Talati et al.'s system generates an email message, providing therein a response to the 
random questions generated by the CA. The response to the random question is an 
authentication phrase. Additionally, although Talati et al. do not expressly disclose establishing 
a signature phrase for being used in a plurality of transactions this is an inherent step. That is, 
Talati et al. disclose receiving a signature phrase from a user and verifying the phrase, before 
receiving the phrase it must have been previously established. Also, the step of linking the 
signature phrase to the account number is an inherent step; that is, Talati disclose validating the 
identity of the originator (i.e. "account number") by requiring the originator to answer a series of 
question that only the originator knows (see col. 4,lines 56-57; col. 5, lines 36-37); the response 
to the question is the signature phrase. Thus, verifying the originator's identity with the 
signature phrase implies that the signature phrase and account number are associated/linked. 
Talati et al. do not expressly disclose confirming rights in the account by associating an account 
code with an account number associated with the account. Biffar discloses confirming rights in 
the account by associating an account code with an account number associated with the account 
(see col. 10, lines 21-34). At the time the invention was made, it would have been obvious to a 
person of ordinary skill in the art to modify the method disclose by Talati et al. to include the 
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confirming rights in the account. One of ordinary skill in the art would have been motivated to 
do this because it secures the user's account. 

Referring to claim 6, Talati et al. disclose the method wherein the authorization form 
includes a transformation system to transform the signature phrase by the node associated with 
the customer, and wherein the interface receives the second account number and the second 
signature phrase in a transformed format (see col. 11, lines 11-16). 

Referring to claim 9, Talati et al. disclose the method wherein the authorization form is 
provided to the node associated with the customer through a network interface (see col. 8, lines 
26-29). 

Referring to claim 11, Talati et al. disclose the method wherein the authorization form 
includes a customer-specific indicator previously provided by the customer to the entity, the 
customer-specific indicator being independent of the merchant (see col. 10, lines 64-67; col. 11, 
lines 1-2). Talati et al. disclose an authorization form including . .randomly generated 
questions on which only the client has knowledge. . this is therefore an authorization form with 
customer-specific indicator being independent of the merchant. 

Referring to claim 12, Talati et al. disclose the authorization form includes information 
identifying the merchant (see col. 11, lines 61-66). Note. It is known in the art that purchase 
order data usually includes merchant information. 

7. Claims 19-32 are rejected under 35 U.S.C. 103(a) as being unpatentable over Talati et al. 
in further view of US Patent No. 6327578 to Linehan. 

Referring to claim 22, Talati et al. disclose creating an authorization form at the 
authorization system, displaying the authorization form to the user, receiving an authentication 
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phrase form the user, and verifying that the received authentication phrase corresponds to an 
authentication phrase in the account entry (see col. 10, lines 13-15, 41-67; col. 1 1, 1-20). Note. 
The CA is the credit authority (See col. 5, line 56). The CA generates an email including 
confirmation information. The confirmation message includes "randomly generated questions 
on which only the client has knowledge, such as birth date, mother's maiden name, social 
security number, etc."; the examiner interprets this confirmation e-mail message as an 
authorization form. As cited by Talati et al„ the user can select "display mail" using a GUI to 
view the form. As per receiving an authentication phrase and verifying the phrase, after 
receiving the authorization form, the user of Talati et al.'s system generates an email message, 
providing therein a response to the random questions generated by the CA. Note. The response 
to the random question is an authentication phrase. Further, the CA confirms/verifies the answer 
to the question using the e-mail control system (ECS), which comprises a mailbox database 
storing e-mail storing "all information necessary to perform validation and authorization 
procedures at the CA (see col. 8,lines 45-47; col. 1 1, lines 27-37). Talati et al. do not expressly 
disclose receiving, at an authorization system, merchant information and account information 
after a user has initiated a transaction from a merchant using a network interface, verifying that 
the merchant information corresponds to the merchant, determining whether the account 
information corresponds to an account entry in an authorization database or transferring the user 
to the merchant. Linehan discloses receiving, at an authorization system, merchant information 
and account information after a user has initiated at transaction from a merchant using a network 
interface (see col. 4, lines 10-23), verifying that the merchant information corresponds to the 
merchant, and determining whether the account information corresponds to an account entry in 
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an authorization database (see col. 4, lines 19-30; col. 7, lines 39-49; col. 10, lines 66-67) and 
transferring the user network interface of the user to the merchant (see col. 5, lines 54-57). Note. 
An interface is the point at which a connection is made between the elements so that they can 
work with each other or exchange information (Microsoft Press, pg. 241). Thus, Although 
Linehan does not specifically disclose "transferring the network interface of the user to the 
merchant" it can be infer. Linehan clearing illustrates and teaches a user and merchant 
communication and exchanging information via network. Hence, when the user communicates 
with the merchant, the user interface is being transferred to the merchant. Therefore, the step of 
"transferring the network interface of the user to the merchant" is an inherent and obvious step. 
At the time the invention was made, it would have been obvious to a person of ordinary skill in 
the art to modify the method disclose by Talati et al. to include the steps of receiving, at an 
authorization system, merchant information and accounting information after a user has initiated 
at transaction from a merchant using a network interface, verifying that the merchant information 
corresponds to the merchant, determining whether the account information corresponds to an 
account entry in an authorization database, and transferring the network interface of the user to 
the merchant. One of ordinary skill in the art would have been motivated to do this because it 
prevents unauthorized individuals from using the user's account. 

Referring to claim 19 and 20, Talati et al. disclose the authentication phrase is a signature 
phrase, and the signature phrase is transformed by the authorization form (see col. 11, lines 11- 
16). 
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Referring to claims 21 and 25, Talati et al. disclose the signature phrase is used for a 
plurality of different transactions with different merchants and the same authorizations system is 
for verifying different transactions for different merchants (see col. 2, lines 51-55). 

Referring to claim 23, Talati et al. disclose a method for authorizing transactions (see 
claim 22 above). Talati et al. do not expressly disclose enabling the network interface of the user 
to be transferred to the authorization system. Linehan discloses enabling the network interface 
of the user to be transferred to the authorization system (see col. 15, lines 17-20). At the time the 
invention was made, it would have been obvious to a person of ordinary skill in the art to modify 
the method disclose by Talati et al. to include the step of enabling the network interface of the 
user to be transferred to the authorization system. One of ordinary skill in the art would have 
been motivated to do this because it provides means for verification. Note. See rationale 
regarding transferring network interface in claim 22 above. 

Referring to claim 24, Talati et al. disclose forwarding an indication that the transaction is 
verified to the merchant (see col. 3, lines 49-54). 

Referring to claim 26, Talati et al. disclose an authorization form (see col. 10, lines 41- 
67). Talati et al. do not expressly disclose the authorization form includes information associated 
with the authorization system. However, it is obvious to modify the authorization form disclose 
by Talati et al. to include information associated with the authorization system, doing so will not 
depart from the scope of Talati et al.'s system. Also, the information associated with the 
authorization system is non-functional descriptive information. 

Referring to claim 27, Talati et al. disclose the authorization form includes information 
associated with the user but not provided by the user to the merchant (see col. 10, lines 64-67; 
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col. 11, lines 1-2). Talati et al. disclose an authorization form including "...randomly generated 
questions on which only the client has knowledge. . this is therefore an authorization form with 
information associated with the user but not provided by the user to the merchant. 

Referring to claim 28, Talati et al. disclose if signature authorization is to occur, 
preparing an authorization form at the central authorization facility, providing the authorization 
form to a node, receiving signature authorization form the node through the authorization form, 
authorizing the first transaction if the signature authorization corresponds to the first user 
information (see col. 10, lines 13-15, 41-67; col. 11, 1-20), and indicating the authorization to the 
first merchant (see col. 3, lines 49-54). Note. The CA is the credit authority (See col. 5, line 56). 
The CA generates an email including confirmation information. The confirmation message 
includes "randomly generated questions on which only the client has knowledge, such as birth 
date, mother's maiden name, social security number, etc."; the examiner interprets this 
confirmation e-mail message as an authorization form. As cited by Talati et al., the user can 
select "display mail" using a GUI to view the form. As per receiving signature authorization, 
after receiving the authorization form, the user of Talati et al.'s system generates an email 
message, providing therein a response to the random questions generated by the CA. The 
response to the random question is interpreted as signature authorization. Talati et al. do not 
expressly disclose receiving at a central authorization facility, a first merchant information and a 
first user information from a first merchant for a first transaction or verifying form at least one of 
the first merchant information and the first user information whether signature authorization is to 
occur. Linehan discloses receiving at a central authorization facility, a first merchant 
information and a first user information from a first merchant for a first transaction and verifying 
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form at least one of the first merchant information and the first user information whether 
signature authorization is to occur (see col. 4, lines 19-30; col. 7, lines 39-49). At the time the 
invention was made, it would have been obvious to a person of ordinary skill in the art to modify 
the method disclose by Talati et al. to include the steps of receiving at a central authorization 
facility, a first merchant information and a first user information from a first merchant for a first 
transaction and verifying form at least one of the first merchant information and the first user 
information whether signature authorization is to occur. One of ordinary skill in the art would 
have been motivated to do this because it prevents unauthorized individuals from using the user's 
account. 

Referring to claims 29 and 30, Talati et al. disclose receiving at the central authorization 
facility (i.e. "transaction administrator"), merchant information (i.e. "recipient") and user 
information (i.e. "originator") (see col. 4, lines 50-57,66-67; col. 5, lines 1-7). Also, Talati et al. 
disclose performing different transactions for "one or more" merchants and users, i.e. first 
merchant, second merchant, a second merchant information, first user information and second 
transaction (see col. 2, lines 51-55). Note. Talati et al. states "The transaction administrator first 
validates the identity of recipient. . ." which implies that the recipient/merchant information has 
been received by the central authorization facility. As per repeating steps b)-g) for the second 
merchant wherein the same signature authorization is used to authorize the second transaction, 
see claim 28 above. 

Referring to claim 31 and 32, Talati et al. disclose a method for authorizing e-commerce 
transactions (see claim 28 above). Talati et al. do not expressly disclose providing software to 
the merchant, wherein the software includes a Buy button. Linehan discloses providing software 
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to the merchant (see col. 20, lines 22-28), wherein the software includes a Buy button (see col. 
14, lines 23-27). At the time the invention was made, it would have been obvious to a person of 
ordinary skill in the art to modify the method disclose by Talati et al. to include the step of 
providing software to the merchant, wherein the software includes a Buy button. One of 
ordinary skill in the art would have been motivated to do this because it supports remote 
purchasing. 

Referring to claim 33, Talati et al. disclose the signature authorization is in the form of a 
signature phrase (see col. 11, lines 11-15). 

Referring to claims 34 and 35, Talati et al. disclose the first user information includes a 
credit card account number (see col. 4,lines 50-56), and the central authorization facility is 
associated with an issuer of a credit card for the credit card account number (see col. 2, lines 67; 
col. 3, line 1). 

Referring to claim 36, Talati et al. disclose the node indicated by the first account 
information is an electronic address for a user who initiated the transaction (see col. 10, lines 61- 
67). 

8. Claims 7 and 8 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over Talati et 
al. and Biffar as applied to claim 13 above, and further in view of U.S. Patent No. 5909492 to 
Payne et al. 

Talati et al. disclose a method for authorizing transactions (see claim 13 above). Talati et 
al. do not expressly disclose creating a transaction certificate to memorialize a successful 
authorization, wherein the transaction certificate may be provided to the node associated with the 
e-commerce merchant to indicate successful authorization. Payne et al. disclose creating a 
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transaction certificate to memorialize a successful authorization, wherein the transaction 
certificate may be provided to the node of the e-commerce merchant to indicate successful 
authorization (see col. 1, lines 37-48). At the time the invention was made, it would have been 
obvious to a person of ordinary skill in the art to modify the method disclose by Talati et al. to 
include the step of creating a transaction certificate to memorialize a successful authorization, 
wherein the transaction certificate may be provided to the node of the e-commerce merchant to 
indicate successful authorization. One of ordinary skill in the art would have been motivated to 
do this because it informs the consumer and the merchant that the transaction was valid (see 
Payne, col. 1, lines 37-48). 

Conclusion 

9. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1. 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Jalatee Worjloh whose telephone number is 703-305-0057. The 
examiner can normally be reached on Mondays-Thursdays 8:30 - 7:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached on 703-305-9768. The fax phone numbers for the 
organization where this application or proceeding is assigned are 703-305-7687 for regular 
communications, 703-746-9443 for Non-Official/Draft and 703-305-7687 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-308-1 1 13. 

Any response to this action should be mailed to: Commissioner of Patents and 
Trademarks, Washington, DC 20231. 

Hand delivered responses should be brought to Crystal Park 5, 2451 Crystal Drive, 
Arlington, V.A., Seventh floor receptionist. 



*** 

April 21, 2003 



